Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8jHAeMq88--WMRikKfHM47t3vmQ.roa
File:                     8jHAeMq88--WMRikKfHM47t3vmQ.roa (raw, json)
Hash identifier:          NJT7ZA4MuVudg65aOYZtHOqpvlTASeOqbnaNs/vbfog=
Subject key identifier:   F2:31:C0:78:CA:BC:F3:EF:96:31:18:A4:29:F1:CC:E3:BB:77:BE:64
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13DA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8jHAeMq88--WMRikKfHM47t3vmQ.roa
Signing time:             Tue 31 Mar 2026 07:56:26 +0000
ROA not before:           Tue 31 Mar 2026 07:56:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5082 (0x13da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F231C078CABCF3EF963118A429F1CCE3BB77BE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:37:d3:0a:5c:a8:d2:05:60:76:47:a4:71:75:
                    71:43:03:08:30:9b:65:7a:d5:4e:8e:42:9a:b0:22:
                    ce:ab:71:49:62:38:61:c3:59:05:84:a8:53:68:64:
                    97:d3:9e:a3:f4:38:b9:38:c9:26:a1:19:64:67:3f:
                    a5:5c:15:8c:96:04:af:57:3e:8b:8d:93:52:95:d4:
                    7a:6c:bf:5b:51:a9:18:6d:06:f0:b7:bb:80:7c:24:
                    c4:f2:16:23:8f:be:91:e3:85:ef:09:8c:51:e5:a7:
                    fa:69:e7:9b:ed:87:5d:cc:3f:ef:33:b6:a3:3d:ad:
                    c5:b2:1c:50:81:3f:3e:ab:4d:98:8c:90:fc:8d:39:
                    dd:d8:c8:25:d5:65:4e:b0:c5:a6:31:01:17:9b:cf:
                    ca:3b:36:0e:34:ce:4e:42:56:ce:ff:8e:a6:15:a3:
                    f3:40:96:29:4c:df:2f:2e:d3:46:a0:ee:0d:16:85:
                    ec:29:e4:ae:ec:42:7a:63:08:07:73:21:21:92:a0:
                    9d:d4:b7:e8:6b:73:d7:0c:3a:da:c3:94:03:56:96:
                    f0:b8:28:d0:12:c2:b4:a9:59:76:a3:99:a0:65:44:
                    19:5b:5a:8e:c6:c3:45:08:03:f2:3e:ad:f4:82:94:
                    a5:ef:59:3d:96:40:63:06:4e:e1:07:1e:b8:9d:cb:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:31:C0:78:CA:BC:F3:EF:96:31:18:A4:29:F1:CC:E3:BB:77:BE:64
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8jHAeMq88--WMRikKfHM47t3vmQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:2d:24:18:5c:10:d7:e7:bb:86:26:41:26:51:1f:f3:ed:97:
         f9:49:3e:61:94:ac:4b:7b:79:ec:ff:10:4a:1c:f5:ac:d9:88:
         1e:2b:51:64:d9:14:ee:bc:36:b4:11:00:95:a4:18:eb:02:43:
         f1:28:4f:80:20:9e:2b:4b:19:60:e2:85:23:a8:5b:d6:79:9b:
         60:d1:37:53:3f:e1:f5:07:6d:dd:ea:8c:42:82:3e:aa:5e:75:
         e2:00:23:93:35:01:8d:20:26:48:13:48:3c:22:23:13:1f:3c:
         fd:a0:70:3c:fe:90:c2:cb:d1:10:7b:3e:06:7d:fa:4d:e9:d6:
         e6:97:75:37:98:84:ae:34:62:ba:3f:a4:35:14:ad:84:69:39:
         f0:ba:e8:cd:16:39:fb:8e:8d:9e:2f:0b:03:91:01:dd:6d:d6:
         b6:93:62:e1:ed:c3:8c:48:11:af:b8:f2:2b:49:72:e9:fc:f2:
         ff:44:34:72:3f:d5:a8:4b:b4:15:7f:88:20:c6:61:87:34:43:
         2d:7f:d6:30:1d:29:35:06:e1:5c:52:d5:93:57:4e:78:0c:e5:
         dd:9c:ce:1f:d3:de:71:9d:f7:7f:77:09:db:2e:91:d7:0d:48:
         dd:06:a0:13:bf:11:bf:f7:a2:03:a5:90:4c:ab:31:f0:9c:a6:
         2a:fa:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:01 2026 by rpki-client